bughz/3proxy
1
0
Fork 0
mirror of https://github.com/3proxy/3proxy.git synced 2026-10-15 16:15:49 +08:00
Code Issues Actions 12 Packages Projects Releases Wiki Activity

Use the service's ssl_client_mode, not the last one configured

Browse Source 
ssl_filter_open() copies ssl_client_mode into the service's
configuration, but the filters deciding when to begin TLS towards the
server read the global value instead: the last ssl_client_mode in the
configuration applied to every service, and a reload changed it for the
services still running.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Vladimir Dubrovin 2026-10-13 15:30:03 +03:00
parent ea65f3834b
commit bab80ef684
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/ssl.c
View File

@ -781,7 +781,7 @@ static FILTER_ACTION ssl_filter_client(void *fo, struct clientparam * param, voi
} }
static FILTER_ACTION ssl_filter_connect(void *fc, struct clientparam * param){ static FILTER_ACTION ssl_filter_connect(void *fc, struct clientparam * param){
if(PCONF->cli && !client_mode) { if(PCONF->cli && !PCONF->client_mode) {
if(docli(param)) { if(docli(param)) {
return REJECT; return REJECT;
} }
@ -790,7 +790,7 @@ static FILTER_ACTION ssl_filter_connect(void *fc, struct clientparam * param){
} }
static FILTER_ACTION ssl_filter_afterauth(void *fc, struct clientparam * param){ static FILTER_ACTION ssl_filter_afterauth(void *fc, struct clientparam * param){
if(PCONF->cli && client_mode == 1) { if(PCONF->cli && PCONF->client_mode == 1) {
if(docli(param)) { if(docli(param)) {
return REJECT; return REJECT;
} }
@ -808,7 +808,7 @@ static FILTER_ACTION ssl_filter_predata(void *fc, struct clientparam * param){
if(!param->redirectfunc) param->redirectfunc = proxyfunc; if(!param->redirectfunc) param->redirectfunc = proxyfunc;
return CONTINUE; return CONTINUE;
} }
else if(PCONF->cli && client_mode == 2) { else if(PCONF->cli && PCONF->client_mode == 2) {
if(docli(param)) { if(docli(param)) {
return REJECT; return REJECT;
} }
@ -817,7 +817,7 @@ static FILTER_ACTION ssl_filter_predata(void *fc, struct clientparam * param){
} }
static FILTER_ACTION ssl_parent(struct clientparam * param){ static FILTER_ACTION ssl_parent(struct clientparam * param){
if(PCONF->cli && client_mode == 3) { if(PCONF->cli && PCONF->client_mode == 3) {
if(docli(param)) { if(docli(param)) {
return REJECT; return REJECT;
} }